CVE-2025-27343 WordPress WooCommerce HTML5 Video Plugin <= 1.7.10 - Reflected Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Webilop WooCommerce HTML5 Video woocommerce-html5-video allows Reflected XSS.This issue affects WooCommerce HTML5 Video: from n/a through = 1.7.10...

CVE-2025-27345 WordPress Booking Ultra Pro Plugin <= 1.1.19 - Reflected Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Deetronix Booking Ultra Pro booking-ultra-pro allows Reflected XSS.This issue affects Booking Ultra Pro: from n/a through = 1.1.19...

CVE-2025-27345 WordPress Booking Ultra Pro Plugin <= 1.1.19 - Reflected Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Deetronix Booking Ultra Pro booking-ultra-pro allows Reflected XSS.This issue affects Booking Ultra Pro: from n/a through = 1.1.19...

CVE-2025-27354

CVE-2025-27354 affects WordPress plugin Simple Email Subscriber (versions n/a–2.3). All connected sources confirm a Cross-Site Scripting (Reflected XSS) flaw arising from improper input neutralization during web page generation. The CVE description states the issue as a Reflected XSS vulnerabilit...

CVE-2025-27346

CVE-2025-27346 concerns a Reflected XSS in the WordPress plugin Rebuild Permalinks (builds/permalink generation). The vulnerability targets the plugin’s rebuild-permalinks flow and is described as an improper neutralization of input during web page generation. Affected scope: Rebuild Permalinks v...

CVE-2025-27346 WordPress Rebuild Permalinks Plugin <= 1.6 - Reflected Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in gerrygooner Rebuild Permalinks rebuild-permalinks allows Reflected XSS.This issue affects Rebuild Permalinks: from n/a through = 1.6...

CVE-2025-31018

The CVE-2025-31018 entry describes a Reflected Cross-Site Scripting (XSS) vulnerability in the WordPress plugin FireDrum Email Marketing, affecting versions from n/a through 1.64. The vulnerability is categorized under Improper Neutralization of Input During Web Page Generation. CVSS v3.1 metrics...

CVE-2025-32506

CVE-2025-32506 describes a Reflected XSS in the WordPress plugin AT Internet SmartTag (AT Internet SmartTag) with affected version range shown as from n/a through 0.2. The vulnerability is due to improper neutralization of input during web page generation. NVD metrics cite CVSSv3.1 base score 7.1...

CVE-2025-32507

CVE-2025-32507 is a reflected Cross‑Site Scripting (XSS) vulnerability in the WordPress plugin “Event Espresso – Custom Email Template Shortcode.” It arises from improper input neutralization during web page generation and affects versions up to 1.0.0. The CVSS 3.1 vector indicates attack require...

CVE-2025-32512 WordPress Revamp CRM for WooCommerce plugin <= 1.1.2 - Reflected Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in revampcrm Revamp CRM for WooCommerce revampcrm-woocommerce allows Reflected XSS.This issue affects Revamp CRM for WooCommerce: from n/a through = 1.1.2...

CVE-2025-32511 WordPress Make Email Customizer for WooCommerce plugin <= 1.0.6 - Reflected Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Excellent Dynamics Make Email Customizer for WooCommerce make-email-customizer-for-woocommerce allows Reflected XSS.This issue affects Make Email Customizer for WooCommerce: from n/a through = 1.0....

CVE-2025-32513 WordPress Total processing card payments for WooCommerce plugin <= 7.1.6 - Reflected Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in totalprocessing Nomupay Payment Processing Gateway totalprocessing-card-payments allows Reflected XSS.This issue affects Nomupay Payment Processing Gateway: from n/a through = 7.1.6...

CVE-2025-32514 WordPress WooCommerce Estimate and Quote plugin <= 1.0.2.5 - Reflected Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in cscode WooCommerce Estimate and Quote wc-estimate-and-quote allows Reflected XSS.This issue affects WooCommerce Estimate and Quote: from n/a through = 1.0.2.5...

CVE-2025-32514

CVE-2025-32514 is a Reflected XSS in the WordPress plugin “WooCommerce Estimate and Quote” (WC Estimate and Quote) affecting versions up to 1.0.2.5. The root cause is improper neutralization of user input during web page generation. The vulnerability could allow an attacker to inject and execute ...

CVE-2025-32516 WordPress Related Videos for JW Player plugin <= 1.2.0 - Reflected Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in ilGhera Related Videos for JW Player related-videos-for-jw-player allows Reflected XSS.This issue affects Related Videos for JW Player: from n/a through = 1.2.0...

CVE-2025-32516 WordPress Related Videos for JW Player plugin <= 1.2.0 - Reflected Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in ilGhera Related Videos for JW Player allows Reflected XSS. This issue affects Related Videos for JW Player: from n/a through 1.2.0...

CVE-2025-32516

CVE-2025-32516 is a Reflected XSS vulnerability in the WordPress plugin Related Videos for JW Player (supported up to version 1.2.0 and earlier). The flaw arises from improper neutralization of input during web page generation, enabling an attacker to inject scripts via user-controlled input that...

CVE-2025-32521 WordPress Cool Flipbox plugin <= 1.8.3 - Reflected Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in CoolHappy Cool Flipbox – Shortcode & Gutenberg Block allows Reflected XSS. This issue affects Cool Flipbox – Shortcode & Gutenberg Block: from n/a through 1.8.3...

CVE-2025-32521

CVE-2025-32521 – Reflected XSS in Cool Flipbox – Shortcode & Gutenberg Block (Cool Flipbox) affects plugin versions

CVE-2025-32522

CVE-2025-32522 affects License Manager for WooCommerce (WordPress plugin) up to version 3.0.9, with a Reflected Cross-Site Scripting vulnerability caused by improper input neutralization during web page generation. CVSSv3.1 base score 7.1 (HIGH), attack vector NETWORK, user interaction REQUIRED. ...